Fedora 13 : postgresql-8.4.4-1.fc13 (2010-8696)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at: http://www.postgresql.org/docs/8.4/static/release-8-4-4.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 13 : mysql-5.1.47-1.fc13 (2010-9016)

Update to MySQL 5.1.47, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850 In F13, also create mysql group explicitly in pre-server script, to ensure correct GID Note that Tenable Network Security...

Fedora 13 : aria2-1.9.3-1.fc13 (2010-8905)

Thu May 20 2010 Rahul Sundaram - 1.9.3-1 - http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NE WS?revision=2101 - Fixes CVE-2010-1512. rhbz 592014 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Fedora 13 : mod_auth_shadow-2.2-8.fc13 (2010-6290)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 13 : viewvc-1.1.5-1.fc13 (2010-5805)

Full changelog: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r evision=2359&view=markup&pathrev=HEAD - security fix: escape user-provided searchre input to avoid XSS attack Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 13 : Miro-2.5.4-3.fc13 / firefox-3.6.2-1.fc13 / galeon-2.0.7-25.fc13 / etc (2010-5202)

Update to new upstream Firefox version 3.6.2, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.2 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner...

Fedora 13 : irssi-0.8.15-1.fc13 (2010-6612)

This release fixes two security issues: The first being that Irssi didn't check hostname on SSL connections and the other being a hard to exploit remote crash bug. For a complete listing of the changes and bugfixes since 0.8.14, please have a look at the http://irssi.org/news/ChangeLog Note that...

Fedora 13 : krb5-1.7.1-8.fc13 (2010-7102)

Joel Johnson reported a possible double-free in the Kerberos KDC MITKRB5-SA-2010-004, CVE-2010-1320. This update adds the upstream fix for this bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Fedora 13 : seamonkey-2.0.4-1.fc13 (2010-6236)

Update to new upstream SeaMonkey version 2.0.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey20.htmlseamonkey2.0.4 CVE-2010-0173 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178...

Fedora 13 : couchdb-0.10.2-1.fc13 (2010-8234)

Ver. 0.10.2 bugfix release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 13 : openssl-1.0.0a-1.fc13 (2010-9574)

Minor update from upstream fixing two security vulnerabilities - CVE-2010-0742 and CVE-2010-1633. It is fully ABI compatible with openssl-1.0.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : cacti-0.8.7f-1.fc13 (2010-9036)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : beanstalkd-1.4.6-1.fc13 (2010-9570)

Sat Jun 5 2010 Jeremy Hinegardner - 1.4.6-1 - update to upstream 1.4.6 - Mon Feb 22 2010 Jeremy Hinegardner - 1.4.3-2 - fix binlogdir location initialization for bug 55831 - Sun Feb 21 2010 Jeremy Hinegardner - 1.4.3-1 - update to upstream 1.4.3 - change default binlogdir in sysconfig file -...

Fedora 13 : kdebase-workspace-4.4.2-5.fc13 (2010-6605)

This build includes a couple of small powerdevil patches see kde bugs 221637, 221637, fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one, initial attempts at kdm/plymouth integration, upstream kdm security fix for CVE-2010-0436 Note that Tenable Network Security has...

Fedora 13 : tar-1.22-16.fc13 (2010-4274)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 Note that...

Fedora 13 : znc-0.090-2.fc13 (2010-10042)

Bug 603915 - znc: NULL pointer dereference flaw leads to segfault under certain conditions A Debian bug report 1 noted that ZNC would segfault under certain conditions, such as clicking 'traffic' in the webadmin pages or issuing the traffic command on the /znc shell. This has been corrected...

Fedora 13 : python-paste-1.7.4-1.fc13 (2010-10414)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...

Fedora 13 : glpi-0.72.4-2.svn11035.fc13 (2010-5068)

This version correct several bugs. Full upstream changelog : Bug 1893: Unable to access to the model of phones dictionnary Bug 1904: Vlan not add using Template Bug 1906: Message-ID should not use $SERVER'HTTPHOST' Bug 1918: configured listlimitmax not honnoured Bug 1941: Disconnecting a port...

Fedora 13 : GraphicsMagick-1.3.12-1.fc13 (2010-4127)

new release, with a handful of bug fixes filtering and security fix related to extended characters in filenames, see also, http://sourceforge.net/mailarchive /message.php?msgname=alpine.GSO.2.01.1002211622420.25017 at freddy.simplesystems.o rg Note that Tenable Network Security has extracted the...

Fedora 13 : nss-3.12.6-1.2.fc13 (2010-3929)

Update to NSS 3.12.6 The primary feature of NSS 3.12.6 is support for the TLS Renegotiation Indication Extension, RFC 5746. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...